diff --git a/Gemfile b/Gemfile
index 46428ed..392746f 100644
--- a/Gemfile
+++ b/Gemfile
@@ -14,7 +14,7 @@ end
 group :production do
   gem 'os',     '~> 1.1'
   gem 'puppet', puppetversion
-  gem 'r10k',   '~> 3.5'
+  gem 'r10k',   '~> 3.12'
   gem 'rugged', '~> 1.0'
   gem 'xmlrpc', '~> 0.3.0' if RUBY_VERSION >= '2.3'
 end
diff --git a/Gemfile.lock b/Gemfile.lock
index 32ede46..1bff1e1 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -14,7 +14,7 @@ GEM
     facter (4.0.29)
       hocon (~> 1.3)
       thor (>= 1.0.1, < 2.0)
-    faraday (0.17.3)
+    faraday (0.17.4)
       multipart-post (>= 1.2, < 3)
     faraday_middleware (0.14.0)
       faraday (>= 0.7.4, < 1.0)
@@ -32,6 +32,7 @@ GEM
     json (2.3.1)
     json-schema (2.8.1)
       addressable (>= 2.4)
+    jwt (2.2.3)
     locale (2.1.3)
     log4r (1.1.10)
     metadata-json-lint (2.4.0)
@@ -39,7 +40,7 @@ GEM
       spdx-licenses (~> 1.0)
     minitar (0.9)
     mocha (1.11.2)
-    multi_json (1.14.1)
+    multi_json (1.15.0)
     multipart-post (2.1.1)
     necromancer (0.5.1)
     os (1.1.0)
@@ -112,12 +113,13 @@ GEM
       puppet-lint (~> 2.0)
       puppet-syntax (>= 2.0, < 4)
       rspec-puppet (~> 2.0)
-    r10k (3.5.1)
+    r10k (3.12.1)
       colored2 (= 3.1.2)
-      cri (>= 2.15.10, < 3.0.0)
+      cri (= 2.15.10)
       fast_gettext (~> 1.1.0)
       gettext (>= 3.0.2, < 3.3.0)
       gettext-setup (~> 0.24)
+      jwt (~> 2.2.3)
       log4r (= 1.1.10)
       multi_json (~> 1.10)
       puppet_forge (~> 2.3.0)
@@ -153,7 +155,7 @@ GEM
       parser (>= 2.7.0.1)
     ruby-progressbar (1.10.1)
     rugged (1.0.1)
-    semantic_puppet (1.0.2)
+    semantic_puppet (1.0.4)
     spdx-licenses (1.2.0)
     text (1.3.1)
     thor (1.0.1)
@@ -203,7 +205,7 @@ DEPENDENCIES
   puppet-lint-unquoted_string-check (~> 2.0)
   puppet-lint-variable_contains_upcase (~> 1.2)
   puppetlabs_spec_helper (~> 2.15)
-  r10k (~> 3.5)
+  r10k (~> 3.12)
   rspec-puppet (~> 2.6)
   rubocop (~> 0.87)
   rugged (~> 1.0)